Bug 27316 - nodejs new security issues CVE-2020-8201, CVE-2020-825[12]
Summary: nodejs new security issues CVE-2020-8201, CVE-2020-825[12]
Status: RESOLVED FIXED
Alias: None
Product: Mageia
Classification: Unclassified
Component: Security (show other bugs)
Version: Cauldron
Hardware: All Linux
Priority: Normal critical
Target Milestone: ---
Assignee: Joseph Wang
QA Contact: Sec team
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2020-09-24 09:26 CEST by Nicolas Salguero
Modified: 2020-09-25 12:30 CEST (History)
1 user (show)

See Also:
Source RPM:
CVE:
Status comment:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Description Nicolas Salguero 2020-09-24 09:26:01 CEST 
Hi,

There are several security issues found in NodeJS before version 14.11.0:
https://nodejs.org/en/blog/vulnerability/september-2020-security-releases/

Best regards,

Nico.
Comment 1 Aurelien Oudelet 2020-09-24 18:06:28 CEST 
Hi, thanks reporting this.

Assigning to registered maintainer.
(Packagers : please set to "Assigned" when you are working on this.)

Assignee: bugsquad => joequant
CC: (none) => joequant

Comment 2 Joseph Wang 2020-09-24 19:42:46 CEST 
Pushing in 14.12.0
Comment 3 Nicolas Salguero 2020-09-25 12:30:43 CEST 
Bumping release of v8 package solved the upload problem.

Resolution: (none) => FIXED
Status: NEW => RESOLVED
Note You need to log in before you can comment on or make changes to this bug.